$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a323130303a3a2f34302d3438203d3e20323134333434.roa File: 326130363a613030343a323130303a3a2f34302d3438203d3e20323134333434.roa (raw, json) Hash identifier: HxFZfUTbrZHfmVNt1/vqaLBxMyvs1FhTf0T5G/ahvr8= Subject key identifier: 1F:C2:C8:DA:A3:BB:99:E5:92:8E:7F:C7:18:15:8A:C3:89:9E:44:CC Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 1851CAEF7814B5256003B2C0C5E3225E1012EDCA Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a323130303a3a2f34302d3438203d3e20323134333434.roa Signing time: Tue 25 Aug 2026 06:47:47 +0000 ROA not before: Tue 25 Aug 2026 06:42:47 +0000 ROA not after: Tue 24 Aug 2027 06:47:47 +0000 asID: 214344 IP address blocks: 2a06:a004:2100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:51:ca:ef:78:14:b5:25:60:03:b2:c0:c5:e3:22:5e:10:12:ed:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Aug 25 06:42:47 2026 GMT Not After : Aug 24 06:47:47 2027 GMT Subject: CN=1FC2C8DAA3BB99E5928E7FC718158AC3899E44CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:b7:56:5e:21:07:b6:e0:21:bd:b5:b1:0f: bd:0c:f8:55:ea:2c:25:17:6a:40:fa:e4:b5:54:2e: 83:84:fd:6f:3b:a2:59:ee:e3:6c:6b:5f:6c:2d:0a: 10:03:aa:f1:6f:ae:25:e6:45:ec:13:2f:8f:5d:1c: 6e:2c:0a:ef:22:97:77:22:91:ab:ae:e7:0f:7b:3c: 8d:b7:28:4c:a5:a2:81:74:ec:33:a6:36:b5:f8:e4: f7:ab:28:80:a1:5b:4a:84:2b:69:cf:04:64:1e:5e: 8b:11:5f:34:0e:6a:c4:37:d5:13:68:83:c3:cb:b5: 45:f2:b9:d2:de:0a:d7:0a:f0:12:e5:24:1f:ee:66: 4a:23:df:10:35:7f:c1:5a:84:00:d3:9f:a7:34:f4: 2a:9b:23:e8:31:71:8d:4a:02:63:74:fc:fb:28:03: d6:14:80:73:e9:6e:f9:4d:a2:99:2d:f6:14:76:5a: 04:63:9c:a7:24:d5:39:0b:54:c7:e6:29:22:2f:e4: 48:c1:07:85:cc:54:89:19:ec:f2:07:9a:a2:23:df: b2:40:7b:2f:85:6f:db:2d:e5:2b:98:e2:63:93:3c: c8:0e:e0:49:24:00:6c:79:ad:f3:09:b1:09:7e:1a: cd:c3:6c:b4:33:e1:7a:70:0c:3a:e7:fa:d3:6f:dd: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C2:C8:DA:A3:BB:99:E5:92:8E:7F:C7:18:15:8A:C3:89:9E:44:CC X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a323130303a3a2f34302d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:2100::/40 Signature Algorithm: sha256WithRSAEncryption c0:17:69:f9:df:31:3e:57:24:f2:df:3b:1a:aa:da:f1:f9:bf: 09:66:fc:e3:3a:7f:6d:66:76:c2:9b:82:2e:d9:c8:fa:2b:4f: df:3f:69:a6:ad:a4:bf:ec:4a:4d:91:ae:d5:0c:4f:10:76:bd: b4:bc:66:6e:f6:43:66:e0:86:84:62:a0:22:b1:74:54:87:c0: ea:7f:e9:9f:a9:5d:a8:19:1c:1e:a4:c0:63:a0:a8:c0:60:eb: fc:db:24:52:c9:a1:7d:37:94:7b:65:bb:5b:04:71:94:99:df: f2:14:18:f2:20:ff:51:eb:f5:4e:da:3a:9d:e7:c8:98:34:64: 4f:52:d1:08:0f:53:56:ee:cc:97:66:45:0e:b1:53:b0:5b:66: d8:0e:1a:c6:6b:e4:2d:f1:38:ae:41:40:23:ad:45:84:80:4b: 3f:21:7e:7d:2a:d2:31:99:5e:df:1a:c5:67:ed:80:aa:da:17: 59:fc:91:83:6b:6d:94:c5:3e:1d:3a:68:d7:d8:ef:0f:ec:23: 86:74:49:16:45:bd:4d:d1:74:d5:a1:d2:f2:90:39:2f:54:66: 1b:80:99:7a:ce:bf:79:f9:33:de:bc:7d:0d:a5:8d:fb:e3:42: cc:db:b3:16:4e:d9:f1:36:c3:fa:3e:d9:98:ce:a8:40:d3:ee: d8:01:d6:de -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUGFHK73gUtSVgA7LAxeMiXhAS7cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA4MjUwNjQyNDdaFw0yNzA4MjQwNjQ3NDdaMDMxMTAvBgNV BAMTKDFGQzJDOERBQTNCQjk5RTU5MjhFN0ZDNzE4MTU4QUMzODk5RTQ0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ6rdWXiEHtuAhvbWxD70M+FXq LCUXakD65LVULoOE/W87olnu42xrX2wtChADqvFvriXmRewTL49dHG4sCu8il3ci kauu5w97PI23KEylooF07DOmNrX45PerKIChW0qEK2nPBGQeXosRXzQOasQ31RNo g8PLtUXyudLeCtcK8BLlJB/uZkoj3xA1f8FahADTn6c09CqbI+gxcY1KAmN0/Pso A9YUgHPpbvlNopkt9hR2WgRjnKck1TkLVMfmKSIv5EjBB4XMVIkZ7PIHmqIj37JA ey+Fb9st5SuY4mOTPMgO4EkkAGx5rfMJsQl+Gs3DbLQz4XpwDDrn+tNv3Q+vAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUH8LI2qO7meWSjn/HGBWKw4meRMwwHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2EzMjMxMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoGoAQhMA0GCSqGSIb3DQEBCwUAA4IBAQDAF2n53zE+VyTy3zsa qtrx+b8JZvzjOn9tZnbCm4Iu2cj6K0/fP2mmraS/7EpNka7VDE8Qdr20vGZu9kNm 4IaEYqAisXRUh8Dqf+mfqV2oGRwepMBjoKjAYOv82yRSyaF9N5R7ZbtbBHGUmd/y FBjyIP9R6/VO2jqd58iYNGRPUtEID1NW7syXZkUOsVOwW2bYDhrGa+Qt8TiuQUAj rUWEgEs/IX59KtIxmV7fGsVn7YCq2hdZ/JGDa22UxT4dOmjX2O8P7COGdEkWRb1N 0XTVodLykDkvVGYbgJl6zr95+TPevH0NpY3740LM27MWTtnxNsP6PtmYzqhA0+7Y Adbe -----END CERTIFICATE-----Generated at Tue Aug 25 16:38:11 2026 by rpki-client